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Abstract 

We show that any quantum algorithm searching an ordered list of n elements 
needs to examine at least °^" — 0(1) of them. Classically, log 2 n queries are both 
necessary and sufficient. This shows that quantum algorithms can achieve only a 
constant speedup for this problem. Our result improves lower bounds of Buhrman 
and de Wolf( |qu~ant-ph/9811046| ) and Farhi, Goldstone, Gutmann and Sipser ( |quant 
ph/9812057|) . 



1 Introduction 

One of main results in quantum computation is Grover's algorithm [[L(| . This quantum 
algorithm allows to search an unordered list of n elements by examining just 0(^Jn) of 
them. Any classical algorithm needs to examine all n elements. Grover's algorithm is very 
important because it can be applied to any search problem (not just searching a list). For 
example, it can be used to find a Hamilton cycle in an n-vertex graph by checking only V* 
out of n\ possible Hamilton cycles. 

After Grover's paper appeared, unordered search and related problems received a lot 
of attention in quantum computation community. It was shown that 0(y/n) is optimal [0. 
Then, Grover's algorithm has been used as subroutine in other quantum algorithms |j[ |J. 
Optimality proof of has been generalized as well[l|, |J. 

Grover's algorithm works well for unordered lists but cannot be used for searching ordered 
lists. An ordered list of n elements can be searched by examining just log 2 n elements 
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classically and there is no evident way of speeding it up by methods similar to Grover's 
algorithm. 

Searching ordered lists by a quantum algorithm was first considered by Buhrman and de 
Wolf 0] who proved a y/logn/ log log n lower bound for quantum case. This lower bound was 
improved to log n/2 log log n by Farhi, Goldstone, Gutmann and Sipser [0] . The log n/2 log log n 
bound was independently discovered (but not published) by the author of this paper in June 
1998. We improve the lower bound to i log n — 0(l), showing that only a constant speedup 
is possible for the ordered search. 

The best quantum algorithm for ordered search uses 0.53 log n queries[||f] Thus, a con- 
stant speedup is possible. 

The proof of our lower bound combines the method of || (adapted to ordered case by 
0) with a new idea inspired by weighted majority algorithms in the learning theory p, |TTf . 

2 Preliminaries 

2.1 Quantum binary search 

In the binary search problem, we are given x\ G IR, . . . , x n G H, y G IR such that x\ < X2 < 
. . . < x n and have to find the smallest i such that y < Xj. Normally, x\, . . ., x n are accessed 
by queries. The input to the query is i, the answer is X{. This is a classical problem in 
computer science and it is well known that log 2 n queries are both necessary and sufficient 
to solve it classically. 

In this paper, we consider how many queries one needs in the quantum world. We will 
prove a ^ logn — 0(1) lower bound. For our proof, it is enough to consider the case when 
X\ G {0,1}, ..., x n G {0,1} and y — 1. Then the problem becomes following. 

0-1 valued binary search. Given x\ G {0, 1}, . . ., x n G {0, 1} such that x\ < x<i < 
... < x n , find the smallest i such that x« = 1. 

Similarly to classical world, we consider algorithms that access the input by queries. A 
quantum algorithm A can be represented as a sequence of unitary transformations 



C/ ^O^C/i->O->...^ U T -i -+0->U>. 
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on a state space with finitely many basis states. U/s are arbitrary unitary transformations 
that do not depend on xi, . . . , Xjv and O's are queries to the input. We use Ok to denote the 
query transformation corresponding to the input Xi = . . . = Xy. — 0, x^+i = . . . = x n = 1. 

To define 0&, we represent the basis states as \i, b, z) where % consists of [logn] bits, b 
is one bit and z consists of all other qubits. Then, Ok maps \i,b,z) to \i,b® Xi,z). (I.e., 
the first [logn] qubits are interpreted as an index i for an input bit Xi and this input bit is 
XORed on the next qubit.) 

1 A different quantum algorithm with clogn queries for c < 1 was claimed in J12J . However, a bug was 
discovered in the proof of |]13 and it is not clear whether the proof can be fixed. 



Running a quantum algorithm A on an input X\ — . . . — Xk — 0, Xk+i — ■ ■ ■ — x n — 1 
means applying the transformation VtO]JJt~\ ■ ■ ■ UiO^Uq to the initial state |0) and mea- 
suring the first [logn] bits of the final state. The algorithm computes the binary search 
function if, for any input x\ = . . . = Xk = 0, Xk+i = . . . = x n = 1, this process gives k with 
probability at least 3/4Q. 

2.2 Technical lemmas 

In this section, we state several results that we will use. The first result is the well-known 
formula for the sum of decreasing geometric progression. If q > 1, then 

00 1 1 °° 1 1 

t^V l ~~ q U.<? < i~ l 

The second result is a lemma from ||. It relates the /2-distance between two super- 
positions and the variational distance between probability distributions that we obtain by 
observing two superpositions. The variational distance between two probability distributions 
p(x) and p'(x) is just the sum J2 X \p( x ) ~ P'( x )\- 

Lemma 10/0/ Let ip and <p be superpositions such that \\tp — <p\\ < e. Then the total 
variational distance resulting from measurements of (p o,nd ip is at most 4e. 

In our case, ip and <fr are final superpositions of a quantum algorithm A on two different 
inputs X\ — . . . — Xj — 0, Xj + i — . . . — x n — 1 and x\ — . . . — Xk — 0, x^+i = . . . = 
x n — 1. For the first input, j is the correct answer and the measurement must return j 
with probability at least |. The probability that the measurement gives k can be at most 
1 — I = \. For the second input, the probability of j can be at most \ and the probability of 
k must be at least |. This means that the variational distance must be at least 2(1 — |) = 1. 
By Lemma |3], this is only possible if \\ip — </>|| > -r. We have shown 

Lemma 2 If %p and are final superpositions of a quantum binary search algorithm, then 

3 Result 



2 One can replace 3/4 by any other constant in (0, 1) and our proof would still give a y^ logn— 0(1) lower 
bound, with a slightly different constant in the O(l) term. 

3 Ronald de Wolf has shown that 4e can be improved to 2e in this lemma. This can be used to improve 
O(l) constant in our yj logn — 0(1) lower bound. 



3.1 log n/2 log log n lower bound 

We start with a sketch of log n/2 log log n lower bound discovered independently by the 
author of this paper and Farhi, Gutmann, Goldstone and SipserfTj. After that, we describe 
how to modify this argument to obtain an f2(logn) lower bound. 

Assume we are given a quantum algorithm A for binary search that uses less than 
log n/2 log log n queries. We construct an input on which A works incorrectly. In the first 
stage, we partition [l,n] into log 2 n intervals of length n/log 2 n each. We simulate A up 
to the first query. There is an interval [(I — 1) • nj log n + 1,1 • nj log n] that is queried 
with probability that less than or equal to 1/log n. We answer the first query of A with 
Xi = for i < I ■ nj log n and x« = 1 for i > I ■ nj log n. Then, we split the interval 
[(/ — 1) • n/log n + 1,1 ■ n/log n] into log n parts of size n/log n, find the one queried 
with the smallest probability, answer the second query by xi = for i up to this interval 
and Xi = 1 for greater i and so on. We repeat the splitting until the interval is smaller than 
log 2 n. This means doing log n/log (log 2 n) = log n/2 log log n splittings. 

Let [(/ — l)m + 1, lm\ be the final interval. Consider two inputs x\ = . . . = x\ m -\ = 0, 
xim = . . . = x n = 1 and x\ = . . . = xi m = 0, xi m+ i = . . . = x n = 1. The only value where 
these two inputs differ is X[ m and, by our construction, it is queried with a probability at 
most 1/log n in each of log nj 2 log log n steps. By a hybrid argument similar to 0, this 
implies that the final superpositions of the quantum algorithm A on these two inputs are 
within distance 0(l/loglogn). Hence, the results of measuring final superpositions on two 
inputs will be close as well (cf. Lemma |[). 

3.2 logn/12 lower bound 

To obtain an Q(logn) lower bound, we must split the interval into a constant number of 
pieces at every step (rather than log 2 n pieces). However, if we split the interval into a 
constant number of pieces, we can only guarantee that the new interval has the probability 
of being queried smaller than some constant (not smaller than 1/log n). Then, it may 
happen that xi m gets queried with a constant probability in each of clogn queries, giving 
the total probability much higher than 1. In this case, the quantum algorithm A can easily 
distinguish two inputs that differ only in x\ m . 

To avoid this, we do the splitting in a different way. Instead of considering just the 
probabilities of an interval being queried in the last step, we consider the probabilities of it 
being queried in the previous steps as well and try to decrease them all. This is done by 
using a weighted sum of these probabilities. The precise argument follows. 

Theorem 1 Let q e H ; q > 1, t e IN, u E IN and 
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be such that q(q') u < 1. Then, at least °^ r \ — 0(1) queries are necessary for the quantum 
binary search on n elements. 

Proof: Assume we are given a quantum algorithm A doing binary search on x\, . . . , x n with 
less than '° g " — c queries where the constant c will be specified later. We construct two 
inputs that A cannot distinguish. 

First, we describe an auxiliary procedure subdivide. This procedure takes an interval 
[(/ — l)m + 1, Im] and returns a subinterval [(/' — l)m! + 1, I'm']. 

subdivide(m, /, s): 

1. Letm' — m/t. Split [(I — l)m + l,lm] into t subintervals: [(I — l)m + l, (I — l)m + m'], 
[(I - l)m + m' + 1,(1- l)m + 2m'], . . ., [(I - l)ra + (t - \)m' + 1,(1- l)m + tm']. 

2. Simulate the first s query steps (and unitary transformations between these steps) of 
A on the input X\ — . . . — X[ m = 0, xi m+ i — . . . — x n — 1. Let 

|0,) = Ui-iO^Ui-2 ■ ■ ■ £/iO /m [/ (|0» 

be the superposition before the i th query step, \ifii) be its part corresponding to querying 
Xk for k E [(I — l)m + 1, Im] and |Vv) ^ e the P ar ^ °f iV'i) corresponding to querying 
Xk for k E [(/ — l)m + (r — l)m' + 1, (/ — l)m + rm']. 

3. For every r G {1, . . . , t}, compute the sum 

Sr = |||VV)II +9|||^(«-l),r)|| + Q 2 \\\^(s-2),r)\\ +••• + "f^H |Vv) ||- 

4. Take the r minimizing S r and set V = (I — l)k + r. Then, [(/' — l)m! + 1, /'m'] is equal 
to [(/ — l)m + (r — l)m! + 1,(1 — l)m + rm']. 

Next, we analyze this procedure. Let 

S= 111^)11 +g|||^-i)||+g 2 |||^ 2 )|| + ... + g s - 1 |||^i J )||. 

Let 4>'i an d V'i be the counterparts for 0j and ^j, given the input X\ = ... = xj/ m / = 0, 
xvm'+i = ■ ■ ■ = Xn = 1. We define 5' = || |^> || + g|| |^-i> II + <? 2 || |^_ 2 ) II + • • •■ 

Lemma 3 

5' < q'S. 

Proof: We bound the difference between superpositions |^) (used to define S') and |Vv) 
(used to define S r ). To do that, we first bound the difference between |0j) and |$). 

Claim 1 

|||0i>-|^>||<2(|||Vi>|| + ...+ |||Vi-i>||). 



Proof: By induction. If i — 1, then |0j) = |^). 

Next, we assume that |||0i_i) — |0i_i}|| < 2(|||?/> 1 )|| + . . . + |||-0 i _ 2 )||). fa is the result of 
applying UiOi m to \fa-i) and |$) is the result of applying XJiOy m i to |</4-i)- L^ is just a 
unitary transformation and it does not change distances. Hence, we have 

1110.) - \m = WiO lm (\fa-i)) - £VW(|#_i»ll = l|O to (|0i-i» - CW(|#_i»ll < 

||o, m (|^_i)) - cw(|&_i))|| + ||cw(|&-i)) - cw(|#_i»ll- 

The second part is just |||0i_i) — |0i_i)|| and it is at most 2(|||V>i)|| + ... + ||| , 0i-2)||) by 
inductive assumption. To bound the first part, let \fi-i) = \fa~i) — \i>i-i)- Then, |<^i-i) is 
the part of superposition \fa-i) corresponding to querying k <£ [(/ — \)m + 1,1m}. 0\ m and 
Oy m i are the same for such k. Therefore, Oimd^i-i)) — CVm'(|<p*-i)) and 

||o jTO (|0i-i)) -o,/ m /(|^_i))|| = ||Oj TO (|^_i» -Ojw(|Vi-i»|| < 

||0 /m (|Vi-i))|| + ||0, w (|Vi-i»|| = 2|||^_ 1 )||. 

n 

Consider the subspace of the Hilbert space consisting of states that correspond to querying 
k G [(/' — l)m',l'm']. |Vv) anc ^ iV'i) are projections of |</>j) and |<^) to this subspace. Hence, 
\ipi,r) — Wi) is the projection of \fa) — |$). For any vector, the norm of its projection is at 
most the norm of the vector itself. Therefore, we have 

Claim 2 

||h/v>- IVOII < 2(|||^)|| + ... + |||^-i)ID- 

This means 

s' = E<ri»ll < E<r*(iihMII + 2(111^)11 + ■ ■ ■ + uhmii)) = 

1=1 8=1 

Eg s -ill^}||H-2E(^EIII^)ll)- (2) 

«=1 i=l j'=l 

The first term is just S r . Next, we bound the second term. 

s i—1 s s s oo 

Eor'E lll^)ll) = E(IH^') II E <r i )<E«;>ll E <r*) = 

i=i i=i i=i t=i+i i=i j=i+i 

E(IH^)II^E^) = E 111^)11 A = zKs. (3) 

j=l i=l 1 3=1 V J- y - 1 

Putting (D), (D) together, we get S' < S r + -^rS. Next, we bound S r . 



Claim 3 

S r < I.S. (4) 

Proof: We have \ipi) = \ipi y x) + . . . + \i/)i,t)- This implies 

lll^)l| 2 =lll^i)ll 2 + --- + lll^)ll 2 - 
By a Cauchy-Schwartz inequality 

(lll^i)ll + ... + |||^)ll) 2 



IIWir + --- + llliMlf > 

111^)11 > 



t 

Therefore, 

\\^i,i)\\ + ... + \\\At) 



Vi 

S is just a weighted sum of || 1^)11 an d Si, • • •, S t are weighted sums of || 1^,1)11, • • •, |||'0;,t)||, 
respectively. Hence, S > Sl +--+ St an d 

Si + ... + S t <ViS. 

By definition of r, S r is the smallest of Si, . . ., S t . This implies (|J). □ 
Claim H gives 

5' < S r + -^—S < (4= + —^r)S = g'S. 

This completes the proof of Lemma ^. □ 

Next, we use the subdivide procedure to construct two inputs that are not distinguished 
by A. This is done as follows. Let v be |~(log(^(l — q(q') u ){l — -))/log</~|. 

1. Let m = n, I = 1, s = 1. 

2. While m > t v , repeat: 

2.1. u times do subdivide(m, I, s) and set I = I', m = m! . 

2.2. 8 = 8 + 1. 

3. v — u times do subdivide(m, I, s) and set / = I', m = m! . 

At the beginning, m = n. Each execution of step 2 decreases m by a factor of t" and 
step 2 is repeated while m>t". Hence, it gets repeated at least 

log(n/t v ) log n — t>log t logn v \ogn .-,/-, \ 
log(t n ) ulogt ulogt u ulogt 

times. 

The final interval [(I — l)m + 1, Im] has a small probability of being queried and, therefore 
it is impossible to distinguish x± = . . . = Xk = 0, xu+i = ■ ■ .x n = 1 for different k G 
[(/ — l)m + 1, Zm] one from another. To prove this, we first show the following invariant: 
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Lemma 4 1. At the beginning of step 2.1., S is at most 1 _ 1 „ M 



2. At the end of step 2.1., S is at most 1 _ / , 



?(?')" 



Proof: By induction. When we first start step 2.1., s — 1, S — \\\4>i)\\ < 1 and 1 < 1 _ 1 ,■,„ . 
For the inductive case, if we have S < x _ -, ,, u at the beginning of step, each subdivide 
decreases it q' times and S < l _ q ) ,, u at the end of the step. Also, if 

s = iqnm\\ 

at the end of one step, then, in the next step, S will be 

eV^IIWII = W+i)\\ +q±g- i \m\\ < l + ^Y^Y = Y^y- 

This completes the proof of the lemma. □ 



By the same argument, S < x _ / n u at the end of step 3. The definition of v implies 



^ j>(i-g(gT)(i-£) _ i (1 i 



l-q{q') u 10 q 

Together with S = J2t=i 1 s ~ l II 1^)11 > 9 s_l |l 1^)11) this implies 

IH*>II<^1 (5) 

Now, we use a hybrid argument similar to @, |7j. Consider A working on the input 
Xl = . . . = xi m = 0, xi m+ i = . . . = x n = 1 and on the input x\ = . . . = x im ^ x = 0, 
xi m — . . . — x n — 1. The final superpositions on these two inputs are 

\<p) = U T O lm U T -i ■ ■ ■ U (\0)), \(f/) = UtO^-iUt-x ...U (\0)). 

We are going to show that ip and ip' are close. To show this, we introduce intermediate 
superpositions (also called hybrids) 

\ipi) = UxOlm-xUT^l ■ ■ ■ Ui+iOlm-iUiOlmUi^x . . . U (\0)). 

Then, ip = p s , ip' = tp - 

Claim 4 

1-i 

llb*>-b<-i>ll<g^f- (6) 



Proof: The only different transformation is the i th query which is 0\ m for \tpi) and 0/ m _i 
for l^j-i). Before this transformation, the state is 

\<f>i) = U i . 1 O lm U i . 2 ...U {\0)) 

The part of this superposition corresponding to querying [(I — l)m + l,lm] is \ipi). This is 
the only part of \(fii) on which Oi m and 0/ m _i are different. Therefore, 

U-i 

||0/ TO (l^»-Ojm-l(|^»|| = ||0/m(|^))-^m-l(|^})|| <2|||^)|| < T^f- 

5 q s l 

The next transformations ([/rC^m-if^r-i ■ ■ ■ Ui) are the same again. This implies @. □ 
By triangle inequality (and formulas (§) and ([I])), 

* *=J 1 - 1 I" 1 '" 1 ! 1 - ~ 1 1 

like) - M\\ < E lll^-i) - Mil <E^/ = ^E-i< -V 1 — = s- 
i=i i=o °y ° i=o y ° x g ° 

However, \(p ) is the final superposition for the input x\ — . . . — Xi m -i = 0, xi m = . . . = 
x n = 1, \ip s ) is the final superposition for the input x\ — . . . — xi m = 0, xi m+ i — . . . — x n — 1 
and, by Lemma Q, the distance between them must be at least 1/4. 

This shows that there is no quantum algorithm A that solves the binary search problem 
with at most M °^" — ^ queries. □ 

By optimizing the parameters in theorem |j, we get 



Corollary 1 At least ^ logn — 0(1) queries are necessary for quantum binary search on n 
elements. 

Proof: Substitute q = 18.3, t — 8, u — 4 into Theorem [I]. □ 

4 Conclusion 

We have shown that any quantum algorithm needs at least log 2 n/12 queries to do binary 
search. This shows that at most a constant speedup is possible for this problem in the query 
model (compared to the best classical algorithm). 

Similarly to other lower bounds on quantum algorithms, this result should not be con- 
sidered as pessimistic. First, the classical binary search is very sequential algorithm and, 
therefore, it is not so surprising that it is impossible to speed it up by using quantum al- 
gorithms. Second, the classical binary search is already fast enough for most (if not all) 
practical purposes. 

We hope that our lower bound technique will be useful for proving other lower bounds 
on quantum algorithms. One of main open problems in this area is the collision problem^! 
for which there is no quantum lower bounds at all. 

Acknowledgments. I thank Ashwin Nayak for suggesting this problem and Ronald de 
Wolf for useful comments. 
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